be despatched via the server - see the RFC extract quoted over) and when that's the scenario, investigating the Issuer and probably the AKI industry to confirm which Root CA issued this first intermediate CA https://ca-none.com/